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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

1 . (Currently Amended) A computer program product on a computer-readable 
medium for updating a computer file used by a computer, said computer program product 
comprising: 

tag inserting code operable to insert into data being processed by said 
computer a tag indicative of a version level of said computer file cun'entlv used by said 
computer; 

^ tag detecting code operable to detect within data received by said computer 
a tag indicative of existence of an updated version of said computer file; and 

(ii) update triggering code operable upon detection of said tag to trigger 
downloading from a predetermined source to provide said updated version of said 
computer file for use by said computer. 

2. (Original) A computer program product as claimed in claim 1, wherein said tag 
is embedded within a header portion of said data. 

3. (Original) A computer program product as claimed in claim 1, wherein said data 
is an e-mail message. 

4. (Original) A computer program product as claimed in claim 1, wherein said 
predetermined source provides one of said updated version of said computer file or 
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modifying data for modifying said computer file currently used by said computer to form 
said updated version of said computer file. 

5. (Original) A computer program product as claimed in claim 1, wherein said tag 
includes a version identifier and further comprising version comparing code operable to 
compare said version identifier with data indicative of a version level of said computer 
file to determine if an updated version of said computer file exists. 

6. (Canceled). 

7. (Currently Amended) A computer program product as claimed in claim € I, 
wherein said tag inserting code does not insert a tag if said data akeady includes a tag 
indicative of the existence of said version level of said computer file currently used by 
said computer or of the existence of a more recent version level of said computer file 
used by said computer, 

8. (Original) A computer program product as claimed in claim 1, wherein said 
computer file is a computer virus definition data file. 

9. (Original) A computer program product as claimed in claim 1, wherein said 
computer file is a computer virus detection engine program file. 

10. (Original) A computer program product as claimed in claim 1, wherein said 
computer file is an anti-virus computer program file. 

11. (Original) A computer program product as claimed in claim 1, wherein said 
tag includes data indicative of a version level of one or more of: 

(i) a computer virus definition data file; 
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(ii) a computer virus detection engine program file; and 

(iii) an anti-virus computer program file. 

12. (Original) A computer program product as claimed in claim 1, wherein said 
tag includes parameters indicative of one or more processing operations previously 
performed upon said data. 

13. (Original) A computer program product as claimed in claim 12, wherein said 
one or more processing operations are anti-virus scanning operations. 

14. (Previously Presented) A computer program product as claimed in claim 1, 
wherein said predetermined source is contains an updated version of said computer file 
provided by a supplier of said computer file. 

15. (Original) A computer program product as claimed in claim 1, wherein said 
predetermined source is remote from said computer. 

16. (Original) A computer program product as claimed in claim 11, wherein said 
predetermined source is accessed via an internet link. 

17. (Original) A computer program product as claimed in claim 1, wherein said 
tag data is encrypted tag data and said tag detecting code includes decryption code for 
decrypting said encrypted tag data. 

18. (Original) A computer program product as claimed in claim 1, wherein said 
update triggering code waits for an initial update delay period following detection of said 
tag before starting download of said updated version of said computer file. 
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19. (Original) A computer program product as claimed in claim 1, wherein if 
download of said updated version of said computer file fails, then said update triggering 
code waits for a failure delay period before retriggering downloading of said updated 
version of said computer file. 

20. (Previously Presented) A computer program product as claimed in claim 19, 
wherein said failure delay period is a psuedo-random value determined by said update 
triggering code. 

21. (Original) A computer program product as claimed in claim 1, wherein said 
update triggering code does not trigger an update if said tag indicates that said updated 
version of said computer file is more than a predetermined number of versions of ahead 
of said computer file currently used by said computer. 

22. (Currently Amended) A computer program product on a computer-readable 
medium, comprising: 

(i) tag inserting code operable to insert a tag within data indicating a version 
level of a computer file used by a first computer, said tag being operable to trigger an 
update of an older version of said computer file used by a second computer when said 
data is received by said second computer. 

23. (Currently Amended) A method of updating a computer file used by a 
computer, said method comprising the stops of : 

inserting into data being processed bv said computer a tag indicative 
of a version level of said computer file cun'entlv used bv said computer: 
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{*) detecting within data received by said computer a tag indicative of 
existence of an updated version of said computer file; and 

^ upon detection of said tag, triggering downloading from a 
predetermined source to provide said updated version of said computer file for use by 
said computer. 

24. (Original) A method as claimed in claim 23, wherein said tag is embedded 
within a header portion of said data. 

25. (Original) A method as claimed in claim 23, wherein said data is an e-mail 
message. 

26. (Original) A method as claimed in claim 23, wherein said predetermined 
source provides one of said updated version of said computer file or modifying data for 
modifying said computer file currently used by said computer to form said updated 
version of said computer file. 

27. (Original) A method as claimed in claim 23, wherein said tag includes a 
version identifier and further comprising the steps of comparing said version identifier 
with data indicative of a version level of said computer file to determine if an updated 
version of said computer file exists. 

28. (Canceled). 

29. (Currently Amended) A method as claimed in claim 2% 23, wherein a tag is not 
inserted if said data akeady includes a tag indicative of the existence of said version level 
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of said computer file currently used by said computer or of the existence of a more recent 
version level of said computer file used by said computer. 

30. (Original) A method as claimed in claim 23, wherein said computer file is a 
computer virus definition data file. 

31. (Original) A method as claimed in claim 23, wherein said computer file is a 
computer virus search engine program file. 

32. (Original) A method as claimed in claim 23, wherein said computer file is an 
anti- virus computer program file. 

33. (Original) A method as claimed in claim 23, wherein said tag includes data 
indicative of a version level of one or more of: 

(i) a computer virus definition data file; 

(ii) a computer virus detection engine program file; and 

(iii) an anti- virus computer program file. 

34. (Original) A method as claimed in claim 23, wherein said tag includes 
parameters indicative of one or more processing operations previously performed upon 
said data. 

35. (Original) A method as claimed in claim 34, wherein said one or more 
processing operations are anti- virus scanning operations. 

36. (Previously Presented) A method as claimed in claim 23, wherein said 
predetermined source is contains an updated version of said computer file provided by a 
suppUer of said computer file. 
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37. (Original) A method as claimed in claim 23, wherein said predetermined 
source is remote from said computer. 

38. (Original) A method as claimed in claim 37, wherein said predetermined 
source is accessed via an internet link. 

39. (Original) A method as claimed in claim 23, wherein said tag data is encrypted 
tag data and said step of detecting includes decrypting said encrypted tag data. 

40. (Original) A method as claimed in claim 23, further comprising the step of 
waiting for an initial update delay period following detection of said tag before starting 
download of said updated version of said computer file. 

41. (Original) A method as claimed in claim 23, wherein if download of said 
updated version of said computer file fails, then further comprising waiting for a failure 
delay period before retriggering downloading of said updated version of said computer 
file. 

42. (Original) A method as claimed in claim 41, wherein said failure delay period 
is a psuedo-random value determined by said update triggering code. 

43. (Original) A method as claimed in claim 23, wherein an update is not triggered 
if said tag indicates that said updated version of said computer file is more than a 
predetermined number of versions of ahead of said computer file currently used by said 
computer. 

44. (Currently Amended) A method of operating a computer^ comprising tho stop 

ef: 
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(i) inserting a tag within data indicating a version level of a computer file used 
by a first computer, said tag being operable to trigger an update of an older version of 
said computer file used by a second computer when said data is received by said second 
computer. 

45. (Currently Amended) Apparatus for updating a computer file used by a 
computer, said apparatus comprising: 

tag inserting logic operable to insert into data being processed by said 
computer a tag indicative of a version level of said computer file cun^entlv used by said 
computer; 

^ tag detecting logic operable to detect within data received by said computer 
a tag indicative of existence of an updated version of said computer file; and 

(ii) update triggering logic operable upon detection of said tag to trigger 
downloading from a predetermined source to provide said updated version of said 
computer file for use by said computer. 

46. (Original) Apparatus as claimed in claim 44, wherein said tag is embedded 
within a header portion of said data. 

47. (Original) Apparatus as claimed in claim 44, wherein said data is an e-mail 
message. 

48. (Original) Apparatus as claimed in claim 44, wherein said predetermined 
source provides one of said updated version of said computer filer or modifying data for 
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modifying said computer file currently used by said computer to form said updated 
version of said computer file. 

49. (Original) Apparatus as claimed in claim 45, wherein said tag includes a 
version identifier and further comprising version comparing logic operable to compare 
said version identifier with data indicative of a version level of said computer file to 
determine if an updated version of said computer file exists. 

50. (Canceled). 

51. (Currently Amended) Apparatus as claimed in claim 3Q 45, wherein said tag 
inserting logic does not insert a tag if said data already includes a tag indicative of the 
existence of said version level of said computer file currently used by said computer or of 
the existence of a more recent version level of said computer file used by said computer. 

52. (Original) Apparatus as claimed in claim 45, wherein said computer file is a 
computer virus definition data file. 

53. (Original) Apparatus as claimed in claim 45, wherein said computer file is a 
computer virus detection engine program file. 

54. (Original) Apparatus as claimed in claim 45, wherein said computer file is an 
anti-virus computer program file. 

55. (Original) Apparatus as claimed in claim 45, wherein said tag includes data 
indicative of a version level of one or more of: 

(i) a computer virus definition data file; 

(ii) a computer virus detection engine program file; and 
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(iii) an anti-vims computer program file. 

56. (Original) Apparatus as claimed in claim 45, wherein said tag includes 
parameters indicative of one or more processing operations previously performed upon 
said data. 

57. (Original) Apparatus as claimed in claim 56, wherein said one or more 
processing operations are anti-virus scanning operations. 

58. (Previously Presented) Apparatus as claimed in claim 45, wherein said 
predetermined source is contains an updated version of said computer file provided by a 
supplier of said computer file. 

59. (Original) Apparatus as claimed in claim 45, wherein said predetermined 
source is remote from said computer. 

60. (Original) Apparatus as claimed in claim 45, wherein said predetermined 
source is accessed via an intemet link. 

61. (Original) Apparatus as claimed in claim 45, wherein said tag data is encrypted 
tag data and said tag detecting logic includes decryption logic for decrypting said 
encrypted tag data. 

62. (Original) Apparatus as claimed in claim 45, wherein said update triggering 
logic waits for an initial update delay period following detection of said tag before 
starting download of said updated version of said computer file. 

63. (Original) Apparatus as claimed in claim 45, wherein if download of said 
updated version of said computer file fails, then said update triggering logic waits for a 
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failure delay period before retriggering downloading of said updated version of said 
computer file. 

64. (Original) Apparatus as claimed in claim 63, wherein said failure delay period 
is a psuedo-random value determined by said update triggering logic. 

65. (Original) Apparatus as claimed in claim 45, wherein said update triggering 
logic does not trigger an update if said tag indicates that said updated version of said 
computer file is more than a predetermined number of versions of ahead of said computer 
file currently used by said computer. 

66. (Currently Amended) Apparatus for inserting a tag within data, said apparatus 
comprising: 

(i) tag inserting logic operable to insert a tag within data indicating a version 
level of a computer file used by a first computer, said tag being operable to trigger an 
update of an older version of said computer file used by a second computer when said e- 
mail is received by said second computer. 
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